CVE-2026-69865

Critical · CVSS 10.0

CVSS: 10.0; nvd
EPSS: —
KEV: No
Class: other; CWE-639

Description

Authorization bypass through user-controlled key in Microsoft Container Registry allows an unauthorized attacker to elevate privileges over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69865

Status: profiled · ingested 2026-09-30T00:00:02.000Z